CVE-2026-102999 | py-pdf pypdf up to 6.18.x Dictionary-Based Attachments API pypdf/_doc_common.py resource consumption

September 30, 2026 Yanac

A vulnerability described as problematic has been identified in py-pdf pypdf up to 6.18.x. The impacted element is an unknown function of the file pypdf/_doc_common.py of the component Dictionary-Based Attachments API. The manipulation results in resource consumption.

This vulnerability is reported as CVE-2026-102999. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More